Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: high
Invalid

Constructor does not validate input

Summary

Constructor does not validate input

Vulnerability Details

It is possible to initialize the contract with:
_feeAddress == address(0)
_entranceFee == type(uint256).max OR _entranceFee == 0
_raffleDuration == type(uint256).max OR _raffleDuration == 0

Impact

That would make the contract practically unusable and/or unprofitable.

Tools Used

Manual review

Recommendations

Introduce reasonable validity checks for the inputs initializing the state variables.

Updates

Lead Judging Commences

Hamiltonite Lead Judge about 2 years ago
Submission Judgement Published
Invalidated
Reason: Admin Input/call validation

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!